In Netwide Assembler (NASM) 2.14rc0, there is an illegal address access in the function find_cc() in asm/preproc.c that will cause a remote denial of service attack, because pointers associated with skip_white_ calls are not validated.
CVSS Details
- CVSS 3.0 Base Score: 5.5
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade nasm | Jul 30, 2024 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade nasm | Feb 22, 2021 | Dec 21, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade nasm | Feb 3, 2021 | Dec 21, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 21, 2017 |
| Suse | — | Upgrade mozilla-nss-toolsUpgrade libfirefox-gio-2_0-0Upgrade MozillaFirefoxUpgrade firefox-gdk-pixbuf-thumbnailerUpgrade libfreebl3Upgrade nasmUpgrade mozilla-nspr-32bitUpgrade firefox-libcairo2Upgrade libsoftokn3Upgrade mozilla-nss-certsUpgrade libfreebl3-32bitUpgrade firefox-gtk3-branding-upstreamUpgrade firefox-glib2-toolsUpgrade mozilla-nsprUpgrade firefox-gtk3-toolsUpgrade firefox-glib2-langUpgrade firefox-libgdk_pixbuf-2_0-0Upgrade mozilla-nss-certs-32bitUpgrade libfirefox-glib-2_0-0Upgrade MozillaFirefox-branding-SLEDUpgrade firefox-gtk3-immodule-vietnameseUpgrade firefox-libatk-1_0-0Upgrade firefox-gtk3-immodule-thaiUpgrade mozilla-nss-develUpgrade firefox-gtk3-immodule-ximUpgrade MozillaFirefox-translations-otherUpgrade mozilla-nss-32bitUpgrade firefox-libpango-1_0-0Upgrade firefox-libffi4Upgrade firefox-gtk3-immodule-multipressUpgrade firefox-gtk3-immodule-inuktitutUpgrade firefox-libffi7Upgrade libsoftokn3-32bitUpgrade firefox-gtk3-immodules-tigrignaUpgrade libfirefox-gmodule-2_0-0Upgrade firefox-gdk-pixbuf-query-loadersUpgrade mozilla-nspr-develUpgrade firefox-gtk3-dataUpgrade mozilla-nssUpgrade MozillaFirefox-translations-commonUpgrade firefox-libcairo-gobject2Upgrade firefox-atk-langUpgrade firefox-gio-branding-upstreamUpgrade firefox-libgtk-3-0Upgrade libfirefox-gobject-2_0-0Upgrade firefox-gtk3-langUpgrade firefox-gdk-pixbuf-langUpgrade firefox-libharfbuzz0Upgrade firefox-gtk3-immodule-amharicUpgrade libfirefox-gthread-2_0-0 | Dec 12, 2019 | Dec 20, 2017 |
| Ubuntu | — | Upgrade nasm | Jul 4, 2018 | Dec 20, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub